Disable RC4 and enable Forward Secrecy.
Deny access to /config.